Skip to content

fix(build): Trying to use auto-genned GITHUB_TOKEN for semantic-release #52

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
MDarmawan merged 5 commits into from
Mar 30, 2026
+8 −3
Merged

fix(build): Trying to use auto-genned GITHUB_TOKEN for semantic-release #52

Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
ce48f26
persist credentials, revert envVAR name
MDarmawan Mar 30, 2026
e1070ae
rename env var again
MDarmawan Mar 30, 2026
5dd2e72
fix(build): using autogenned GITHUB_TOKEN
MDarmawan Mar 30, 2026
4b41436
add provenance
MDarmawan Mar 30, 2026
9af732b
newlines
MDarmawan Mar 30, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 8 additions & 3 deletions .github/workflows/build.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -81,8 +81,10 @@ jobs:
name: semantic-release
needs: build
permissions:
contents: write # REPO PERMISSIONS
id-token: write # OIDC PERMISSIONS
contents: write # Repo permissions
id-token: write # Open ID Connect permissions
issues: write # Permission to write to issues if failed
pull-requests: write
runs-on: ubuntu-latest

steps:
Expand All @@ -98,8 +100,11 @@ jobs:
run: |
npm ci
npm run build

- name: Verify the integrity of provenance attestations and registry signatures for installed dependencies
run: npm audit signatures

- name: Run semantic-release
env:
GITHUB_TOKEN: ${{ secrets.GH_TOKEN }}
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # Using auto-populated GITHUB_TOKEN with above permissions
run: npm run semantic-release
Loading